Page 92 of 461 results (0.012 seconds)

CVSS: 10.0EPSS: 34%CPEs: 2EXPL: 3

CVE-2000-0967 – PHP 3.0.16/4.0.2 - Remote Format Overflow

https://notcve.org/view.php?id=CVE-2000-0967

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs. • https://www.exploit-db.com/exploits/220 https://www.exploit-db.com/exploits/20286 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:75.php.asc http://archives.neohapsis.com/archives/bugtraq/2000-10/0204.html http://www.atstake.com/research/advisories/2000/a101200-1.txt http://www.calderasystems.com/support/security/advisories/CSSA-2000-037.0.txt http://www.linux-mandrake.com/en/security/MDKSA-2000-062.php3?dis=7.1 http://www.redhat.com/support/errata/RHSA •

CVSS: 5.0EPSS: 0%CPEs: 18EXPL: 1

CVE-2000-0860

https://notcve.org/view.php?id=CVE-2000-0860

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables. • http://archives.neohapsis.com/archives/bugtraq/2000-08/0455.html http://archives.neohapsis.com/archives/bugtraq/2000-08/0477.html http://archives.neohapsis.com/archives/bugtraq/2000-09/0150.html http://cvsweb.php.net/viewcvs.cgi/php4/main/rfc1867.c.diff?r1=1.38%3Aphp_4_0_2&tr1=1.1&r2=text&tr2=1.45&diff_format=u http://www.securityfocus.com/bid/1649 https://exchange.xforce.ibmcloud.com/vulnerabilities/5190 •

CVSS: 10.0EPSS: 6%CPEs: 14EXPL: 1

CVE-2000-0059 – PHP 3.0.13 - 'Safe_mode' Failure

https://notcve.org/view.php?id=CVE-2000-0059

PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands. • https://www.exploit-db.com/exploits/19708 http://www.securityfocus.com/bid/911 •

CVSS: 7.5EPSS: 1%CPEs: 3EXPL: 1

CVE-1999-0068 – PHP/FI 1.0/FI 2.0/FI 2.0 b10 - mylog/mlog

https://notcve.org/view.php?id=CVE-1999-0068

CGI PHP mylog script allows an attacker to read any file on the target server. • https://www.exploit-db.com/exploits/19553 http://www.osvdb.org/3396 http://www.securityfocus.com/bid/713 •

CVSS: 10.0EPSS: 1%CPEs: 3EXPL: 1

CVE-1999-0238 – PHP PHP/fi 2.0 - Directory Traversal

https://notcve.org/view.php?id=CVE-1999-0238

php.cgi allows attackers to read any file on the system. • https://www.exploit-db.com/exploits/20567 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0238 •